1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
package main
import (
"context"
"os"
"os/signal"
"os/user"
"strconv"
"strings"
"syscall"
"tildegit.org/tjp/sliderule/logging"
)
type config struct {
hostname string
geminiRoot string
tlsKeyFile string
tlsCertFile string
uploaderFingerprints []string
}
func configure() config {
fingerprints := strings.Split(os.Getenv("UPLOADER_FINGERPRINTS"), ",")
return config{
hostname: os.Getenv("HOST_NAME"),
geminiRoot: os.Getenv("GEMINI_ROOT"),
tlsKeyFile: os.Getenv("TLS_KEY_FILE"),
tlsCertFile: os.Getenv("TLS_CERT_FILE"),
uploaderFingerprints: fingerprints,
}
}
func dropPrivileges() (bool, error) {
me, err := user.Current()
if err != nil {
return false, err
}
if me.Uid != "0" {
return false, nil
}
nobody, err := user.Lookup("nobody")
if err != nil {
return false, err
}
uid, err := strconv.Atoi(nobody.Uid)
if err != nil {
return false, err
}
if err := syscall.Setuid(uid); err != nil {
return false, err
}
return true, nil
}
func serverContext() (context.Context, logging.Logger, logging.Logger, logging.Logger, logging.Logger) {
debug, info, warn, err := logging.DefaultLoggers()
ctx, _ := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGHUP)
ctx = context.WithValue(ctx, "debuglog", debug) //nolint:staticcheck
ctx = context.WithValue(ctx, "infolog", info) //nolint:staticcheck
ctx = context.WithValue(ctx, "warnlog", warn) //nolint:staticcheck
ctx = context.WithValue(ctx, "errorlog", err) //nolint:staticcheck
return ctx, debug, info, warn, err
}
|
